Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
File: 0c9dkt13uO9-1s1XyqoQr9mOnlo.mft (raw, json)
Hash identifier: /A+jq0ES+PRs9WRll3ihmeJz4mYBKGNG4LAo9Y5yAW0=
Subject key identifier: 95:2C:FF:E0:C0:B4:00:C9:F7:88:30:CA:52:D6:26:A2:19:59:C8:A0
Authority key identifier: D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
Certificate issuer: /CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Certificate serial: 019F91A41A8F3921A8EA298250F0575059E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
Manifest number: 024C
Signing time: Fri 24 Jul 2026 01:01:18 +0000
Manifest this update: Fri 24 Jul 2026 01:01:18 +0000
Manifest next update: Sat 25 Jul 2026 01:01:18 +0000
Files and hashes: 1: 0c9dkt13uO9-1s1XyqoQr9mOnlo.crl (hash: LVqqiSSSSHbIlZ0gWLo6tNDLcvjuCZ9O06ewMDyaW+4=)
2: aRPei__YV55E5LayLWDZlLmCI2M.roa (hash: Cq96j35j1pjMRWQ8I4PQ7Ruzt7oVF+lvmFKi5QfS62o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:1a:8f:39:21:a8:ea:29:82:50:f0:57:50:59:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Validity
Not Before: Jul 24 01:01:18 2026 GMT
Not After : Jul 25 01:01:18 2026 GMT
Subject: CN=952cffe0c0b400c9f78830ca52d626a21959c8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a6:94:9e:d6:2d:8c:e6:65:2b:13:d8:9a:bf:
71:da:3c:2f:40:53:8b:ff:a7:a6:8a:db:a0:5b:d0:
43:7f:6a:c1:cd:1d:9e:5a:da:24:5a:73:b6:e8:68:
ed:fd:5b:40:32:63:27:e3:c7:bb:aa:50:32:98:b4:
22:26:ad:d9:f9:ea:48:cf:56:1d:b4:c3:28:c0:02:
09:e0:c2:a5:0d:2d:ca:87:d4:c6:ce:06:c4:db:26:
dd:e3:ef:b5:ac:8c:ce:da:5c:ee:06:c2:4f:2b:4f:
3b:62:bd:77:b8:e2:3e:19:55:4c:fe:23:de:1f:dc:
34:bd:46:fe:d3:b1:cb:e3:32:39:19:41:a2:46:83:
d1:f5:4a:66:97:07:b2:d2:e7:de:4a:7e:4f:f1:df:
61:e2:81:c9:38:d1:11:10:b9:09:76:f0:02:fb:a4:
87:88:41:ac:f0:23:58:29:d1:18:12:39:a0:20:07:
29:c9:85:31:5b:2f:2d:38:ee:4d:ab:cf:53:9d:3c:
9f:09:bb:84:f6:a9:91:d9:fb:13:41:2a:5a:54:59:
26:a2:b4:bd:dd:2a:93:75:f4:f7:94:d3:bb:08:29:
d7:60:5f:b4:1c:5c:33:51:73:de:1f:24:f8:c4:9a:
90:1f:2d:47:ef:5e:ad:87:b3:21:ad:96:ed:be:dd:
54:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2C:FF:E0:C0:B4:00:C9:F7:88:30:CA:52:D6:26:A2:19:59:C8:A0
X509v3 Authority Key Identifier:
keyid:D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7c:b3:68:08:e8:15:04:84:c3:c1:c3:07:41:82:5d:3e:a2:
0d:d0:97:78:b9:d0:6d:19:2e:da:92:b5:5a:2e:a1:40:95:0a:
82:3b:c8:2b:3f:b6:c6:7f:08:50:ba:94:a5:41:41:97:03:4e:
e7:42:58:06:6e:53:16:88:10:ab:51:41:15:87:a5:24:45:81:
8d:29:00:89:69:55:4f:38:29:5e:a1:32:dc:a9:c8:77:17:05:
a8:1e:d3:ad:5e:79:18:fe:2e:c7:2c:db:b8:cc:63:3c:a5:cf:
95:d4:b6:4c:44:f5:f4:99:f3:3d:2d:a8:02:e1:0c:9d:db:88:
4d:71:3e:b5:82:17:4a:b7:c7:17:a2:1a:62:bf:77:ae:e6:a8:
80:65:08:0d:1b:f1:7f:1e:cf:1d:6f:8d:96:d5:02:67:23:b1:
d5:d3:8c:5a:ef:d4:9c:87:1d:c9:5f:63:db:b9:24:78:d1:cc:
d3:6c:fd:7e:5d:7b:35:c8:1a:e4:a7:f2:42:55:51:b1:27:71:
c1:43:cc:93:f3:11:55:6b:0c:4f:8e:e9:e2:62:1c:74:d0:99:
be:3c:43:61:87:61:af:a7:c1:4b:3f:0c:94:b0:a2:1e:a1:db:
90:6e:95:77:d7:35:d9:fc:2f:8f:56:32:e4:f6:6c:ec:a8:99:
9e:e8:b0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:22:59 2026 by rpki-client